This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft File: W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft (raw, json) Hash identifier: 8L+dyOcMsprE0dWQCIheqkWd7ODdDEfZsH/Vnwahvhg= Subject key identifier: FC:61:D6:61:10:C4:7A:D8:B8:44:2C:4C:B2:1B:6B:9D:3B:B7:EB:27 Authority key identifier: 5B:9A:40:FC:3F:35:0A:BD:A5:9D:BF:C0:1C:A3:7A:46:D8:D7:47:64 Certificate issuer: /CN=5b9a40fc3f350abda59dbfc01ca37a46d8d74764 Certificate serial: 019AF5E5C107F0CCC4C9834D1B901CA0D763 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft Manifest number: 176A Signing time: Sat 06 Dec 2025 23:01:06 +0000 Manifest this update: Sat 06 Dec 2025 23:01:06 +0000 Manifest next update: Sun 07 Dec 2025 23:01:06 +0000 Files and hashes: 1: W5pA_D81Cr2lnb_AHKN6RtjXR2Q.crl (hash: 3qupuy1xwNf/JNGLfsnKfIvVw3OuPvYVKsEliEpQU2Q=) 2: tB5aBJS3V73LTF4Y_ajxS_KE82E.roa (hash: 9K+XAgVeIkD6/9g1gviP3PsjTP4VKXdwP9YBlFoakdM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:c1:07:f0:cc:c4:c9:83:4d:1b:90:1c:a0:d7:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b9a40fc3f350abda59dbfc01ca37a46d8d74764 Validity Not Before: Dec 6 23:01:06 2025 GMT Not After : Dec 7 23:01:06 2025 GMT Subject: CN=fc61d66110c47ad8b8442c4cb21b6b9d3bb7eb27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:17:9f:18:31:3e:21:74:40:37:71:30:a4:c6: 2f:e9:7f:fb:10:fd:fe:a9:46:5f:fe:57:24:44:01: 14:ba:26:5e:3a:82:bb:7a:f6:56:22:92:69:a1:2b: e0:88:c0:7e:70:f3:58:ac:6c:c8:4c:ae:8b:8c:60: d6:00:ee:89:56:66:d6:36:45:24:42:d5:d7:59:d8: 80:b6:39:36:af:e9:7a:d9:dd:02:50:73:f7:d8:7f: 8f:c1:ad:eb:af:a3:b2:e2:99:12:43:41:d9:49:75: a2:38:55:cc:68:30:40:30:53:71:06:00:04:ea:8f: d7:14:f6:ff:a7:99:e5:c9:93:e2:26:92:6e:75:62: 5f:a8:93:3f:75:76:5a:58:16:d0:31:96:ba:16:64: 9b:b8:c4:c3:9a:41:2e:a9:38:9e:bc:46:2d:d5:8e: 46:db:34:c6:4e:07:aa:34:02:60:35:cc:55:33:bd: 90:d0:09:f7:fb:0b:80:7a:e9:40:2f:3f:f1:80:3d: 8d:e6:f0:7c:3f:70:30:11:de:1f:6d:11:11:0b:7d: 02:bb:0c:9c:34:94:29:b2:0e:7d:3a:5a:2d:1e:75: 2a:18:b2:09:3e:b7:f7:36:6d:5d:5a:ae:d2:be:11: 6a:29:dc:71:34:8f:ff:ed:ee:63:d0:ac:1b:b8:9f: 58:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:61:D6:61:10:C4:7A:D8:B8:44:2C:4C:B2:1B:6B:9D:3B:B7:EB:27 X509v3 Authority Key Identifier: keyid:5B:9A:40:FC:3F:35:0A:BD:A5:9D:BF:C0:1C:A3:7A:46:D8:D7:47:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:95:4e:2d:46:75:e8:d7:e3:ad:c2:fc:f4:b5:7c:72:3d:df: 95:bc:36:84:e1:87:2e:d4:d2:63:9b:fa:8b:76:e3:2c:95:17: 0c:df:d0:16:f8:50:35:bb:9b:1b:fd:ef:f4:29:b5:54:70:b5: b5:80:92:05:6f:c1:bc:a9:9c:4c:b9:c6:38:52:07:b3:06:bb: 07:08:a6:41:9b:d0:de:49:56:42:c5:17:4c:ab:21:47:93:33: d9:86:68:aa:b9:f0:51:ae:f5:b9:44:27:7b:a6:f8:3c:5c:d7: fb:61:a8:dc:a8:6f:92:19:91:d1:54:5e:08:df:69:5d:8c:16: ad:af:c4:cd:a3:4d:f4:ec:db:fa:1f:64:f8:1e:b0:db:2b:c8: 95:3d:4f:89:38:89:da:fa:6c:e1:7e:9d:76:7e:f9:c2:05:63: c8:86:09:39:04:41:e2:63:78:fe:ff:45:a3:2f:f6:39:86:92: 52:e7:c8:ff:a5:c8:c2:5a:a7:4b:b0:3d:11:c1:79:6d:09:36: 79:f9:f6:50:79:c8:05:ff:98:24:df:3a:e8:99:93:2b:62:28: 05:ad:81:6d:63:f8:53:7f:4f:c6:0c:24:0b:36:ea:de:87:74: 67:cc:a5:ea:96:02:a3:08:c9:96:e1:a8:97:9b:ed:2c:a0:31: 12:11:94:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15cEH8MzEyYNNG5AcoNdjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViOWE0MGZjM2YzNTBhYmRhNTlkYmZjMDFjYTM3YTQ2ZDhk NzQ3NjQwHhcNMjUxMjA2MjMwMTA2WhcNMjUxMjA3MjMwMTA2WjAzMTEwLwYDVQQD EyhmYzYxZDY2MTEwYzQ3YWQ4Yjg0NDJjNGNiMjFiNmI5ZDNiYjdlYjI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhefGDE+IXRAN3EwpMYv6X/7EP3+ qUZf/lckRAEUuiZeOoK7evZWIpJpoSvgiMB+cPNYrGzITK6LjGDWAO6JVmbWNkUk QtXXWdiAtjk2r+l62d0CUHP32H+Pwa3rr6Oy4pkSQ0HZSXWiOFXMaDBAMFNxBgAE 6o/XFPb/p5nlyZPiJpJudWJfqJM/dXZaWBbQMZa6FmSbuMTDmkEuqTievEYt1Y5G 2zTGTgeqNAJgNcxVM72Q0An3+wuAeulALz/xgD2N5vB8P3AwEd4fbRERC30Cuwyc NJQpsg59OlotHnUqGLIJPrf3Nm1dWq7SvhFqKdxxNI//7e5j0KwbuJ9YuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPxh1mEQxHrYuEQsTLIba507t+snMB8GA1UdIwQY MBaAFFuaQPw/NQq9pZ2/wByjekbY10dkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzVwQV9EODFDcjJsbmJfQUhLTjZSdGpYUjJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yZWVkZTYtZmMyMC00ZjhhLWFlMjkt NzI1Mzc1MjZhZWUyLzEvVzVwQV9EODFDcjJsbmJfQUhLTjZSdGpYUjJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yZWVkZTYtZmMyMC00ZjhhLWFlMjktNzI1Mzc1MjZhZWUy LzEvVzVwQV9EODFDcjJsbmJfQUhLTjZSdGpYUjJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqZVOLUZ1 6NfjrcL89LV8cj3flbw2hOGHLtTSY5v6i3bjLJUXDN/QFvhQNbubG/3v9Cm1VHC1 tYCSBW/BvKmcTLnGOFIHswa7BwimQZvQ3klWQsUXTKshR5Mz2YZoqrnwUa71uUQn e6b4PFzX+2Go3KhvkhmR0VReCN9pXYwWra/EzaNN9Ozb+h9k+B6w2yvIlT1PiTiJ 2vps4X6ddn75wgVjyIYJOQRB4mN4/v9Foy/2OYaSUufI/6XIwlqnS7A9EcF5bQk2 efn2UHnIBf+YJN866JmTK2IoBa2BbWP4U39PxgwkCzbq3od0Z8yl6pYCowjJluGo l5vtLKAxEhGURg== -----END CERTIFICATE-----Generated at Sun Dec 7 02:41:22 2025 by rpki-client